Exploit for apache-camel-docling-security-assessment

CVE-2026-40047

kitploit · 2026-08-24

Entry point

Parameterflag · query param

Pathexploit/attack

Demonstrates CLI argument injection via crafted CamelDoclingCustomArguments in header forwarded to docling (CWE-88) and path traversal (CWE-22).

Affected Apache Camel versions

Apache Camel< 4.18.3

All known vulnerabilities by product

Apache Camel

CVSS 9.1 for CVE-2026-40047

9.1

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:NONE

Exploit Details

Modified:2026-08-24 11:33

Last Seen:2026-08-25 22:43

Reporter:KitPloit

Other exploits for CVE-2026-40047

CVE-2026-40047

2026-08-25 KitPloitKITPLOIT

Exploit for Argument Injection in Apache Camel

2026-07-13 amnsecurityGITHUB

Exploit for CVE-2026-40047

2026-07-08 oscerdGITHUB

Exploit Code

MARKDOWN11 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-AMNSECURITY-APACHE-CAMEL-DOCLING-SECURITY-ASSESSMENT
# CVE-2026-40047 - Inyección de Argumentos en CLI de Apache Camel Docling

**Informe de Ciberseguridad de Estilo Consultor**  
Informe profesional de evaluación de vulnerabilidades sobre el riesgo de validación de argumentos en Apache Camel Docling, que incluye impacto técnico, remediación y estrategia de mitigación.

![Report Type](https://img.shields.io/badge/Report-Vulnerability%20Assessment%20Report-blue?style=for-the-badge) ![Sanitized](https://img.shields.io/badge/Status-Sanitized%20Public%20Report-brightgreen?style=for-the-badge) ![OWASP WSTG](https://img.shields.io/badge/Methodology-OWASP%20WSTG-2ea44f?style=for-the-badge) ![Focus Area](https://img.shields.io/badge/Focus-Application%20Security-informational?style=for-the-badge)

* * *

## 📍 Resumen del Informe

Exploit Code

Share

Share on social media: